3481 matches found
PayPal Inc Bug Bounty #117 - Session Fixation Vulnerability
Document Title: =============== PayPal Inc Bug Bounty 117 - Session Fixation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1509 EIBBP-31983 P2 Video: http://www.vulnerability-lab.com/getcontent.php?id=1615 Vulnerability Magazine:...
WordPress Collne Welcart e-Commerce Plugin <= 1.5.2 - Multiple SQL Injection
Multiple SQL Injection vulnerabilities are in admin.php in this plugin. These vulnerabilities allow an authenticated user to execute arbitrary SQL commands via the 1. searchcolumn or 2. switch parameter. Solution Update the plugin...
breal.net XSS vulnerability
Vulnerable URL: http://www.breal.net/ecommerce/recherche.cfm Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100757 Google Pagerank| 0 VIP website status:|...
WordPress E-Commerce Shop Styling Plugin <= 2.5 - Local File Inclusion
This plugin is prone to a local file inclusion vulnerability, becuse the code in ./wp-ecommerce-shop-styling/includes/download.php is not sanitized. Solution Update the plugin...
Researchers Outline Bugs in Yahoo, PayPal, Magento
Researchers recently discovered a smattering of vulnerabilities in web applications and mobile applications belonging to companies like Yahoo, PayPal, Magento, and Shopify that could have led to account theft, session hijacking, and phishing, among other consequences. Hadji Samir, Ebrahim Hegazy,...
PayPal Inc - SecApproval & 2FA Auth Bypass Vulnerability
Document Title: =============== PayPal Inc - SecApproval & 2FA Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1486 Video: http://www.vulnerability-lab.com/getcontent.php?id=1485 Watch Video:...
PayPal Stored Cross Site Scripting
Document Title: =============== PayPal Bug Bounty 119 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1588 Video: http://www.vulnerability-lab.com/getcontent.php?id=1587 Vulnerability Magazine:...
WordPress Welcart E-Commerce Plugin - Multiple Vulnerabilities
This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Solution Update the plugin...
WordPress Welcart E-Commerce Plugin <= 1.3.12 - Cross Site Scripting
This plugin is prone to a DOM cross site scripting vulnerability. Solution Update the plugin...
Welcart e-Commerce < 1.4.18 - Multiple Vulnerabilities
The Welcart e-Commerce WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress WP e-Commerce Shop Styling Plugin Arbitrary File Download Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.WP e-Commerce Shop Styling is one of the plugin used to improve the style of WP e-commerce store templates. An...
WordPress E-Commerce Shop Styling Plugin 2.5 - Arbitrary File Download
E-Commerce Shop Styling plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...
WordPress Plugin WP E-Commerce Shop Styling 2.5 - Arbitrary File Download
Title: Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-05 Download Site: https://wordpress.org/plugins/wp-ecommerce-shop-styling Vendor: https://profiles.wordpress.org/haet/ Vendor Notified: 2015-07-05, fixed...
WP e-Commerce Shop Styling <= 2.5 - Local File Inclusion
The code in ./wp-ecommerce-shop-styling/includes/download.php does not sanitise user input to prevent sensitive system files from being downloaded. You'll have to rename the download file via mv -- -..-..-..-..-..-..-..-..-etc-passwd passwd as the filename is set to the download filename with pat...
WP e-Commerce Shop Styling <= 2.5 - Local File Inclusion
The code in ./wp-ecommerce-shop-styling/includes/download.php does not sanitise user input to prevent sensitive system files from being downloaded. You'll have to rename the download file via mv -- -..-..-..-..-..-..-..-..-etc-passwd passwd as the filename is set to the download filename with pat...
Hackers Exploit Zero-Day Magento Vulnerability to Steal Your Credit Cards
Hackers are increasingly exploiting an unknown flaw to siphon payment card information from e-commerce websites that use Magento, the most popular e-commerce platform owned by eBay. Security researchers at Sucuri are still investigating the attack vector, but they believe that cyber criminals are...
WordPress e-Commerce Plugin 3.8.9.5 - File Upload
This plugin is prone to a GIF file upload vulnerability. Solution Upgrade the plugin...
WordPress e-Commerce Plugin <= 3.8.9 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...